Protect a server: firewall allows 80/443, blocks rest; IDS alerts on port scans; VPN encrypts remote admin access; rate-limiting blunts DDoS. A breach: logs show odd 3AM logins; isolate, patch, rotate keys. Defense in depth: no single wall.